RIFTWAKEPrivacy notice
Effective 23 September 2026. RIFTWAKE is a browser game operated by Nuvreon, Corp. This notice explains the information used for accounts, gameplay, purchases, referrals, optional analytics and optional marketing emails.
Controller and contact
The controller is Nuvreon, Corp., a United States company, at 131 Continental Dr Suite 305 Newark, DE, 19713 US. Send account and privacy inquiries to contact@nuvreon.com.
Accounts and Google sign-in
Email registration uses your email address and authentication information. Google sign-in provides an account identifier, email address and basic profile information through Supabase. We use this to sign you in, link an existing account and support account recovery. We do not access your Gmail mailbox or Google Drive. Google account information is not sold or used for advertising targeting.
Game records and public identity
We store your account identifier with your nickname, selected game avatar, verified play records, rankings, progression, owned items, purchase status and HUD preferences. Rankings display game identity and results; duels show your game avatar to your opponent. Your email address and Google profile photo are not displayed on public rankings. Service providers may process request and connection logs for delivery, security and error investigation.
Providers and payments
Supabase provides authentication and data storage. Google Cloud hosts the game API and duel server. Cloudflare delivers the web game. Resend delivers authentication emails. Stripe processes purchases and support payments; we retain identifiers, amounts and processing status to verify delivery and handle refunds. We do not store payment card numbers on the game server. These providers may process data outside your country under their own service and privacy terms.
Browser storage and optional analytics
The browser stores sign-in sessions and preferences such as language, audio, controls and privacy choices. Account HUD layouts are also stored on the server for use across devices. Google Analytics is loaded only after you allow analytics. We send a restricted set of screen and gameplay events without nicknames, email addresses, chat or account IDs. Advertising personalization and Google Signals are not enabled. You can decline analytics without losing game features, or change and withdraw your choice through Privacy settings. Withdrawing stops further measurement and removes the site's Analytics cookies; it does not automatically erase data already processed by Google.
Advertising and ad removal
Advertising remains off while provider approval or required consent is missing. Ads, when available, appear in designated non-combat areas, not during expeditions, duels or level-up choices. Applicable advertising consent is collected through a Google-certified consent mechanism. An ad-removal purchase is linked to the signed-in account and applies across its devices. Ownership is checked before loading game ads. A completed full refund removes the associated ad-removal entitlement. Payment does not automatically enable analytics or advertising consent.
Retention and your requests
Account and game records are retained for the operation of the service. Deletion requests are handled after ownership is verified; records needed for transactions, disputes or other applicable obligations may be retained separately for that purpose. Use My Account to edit your nickname and avatar and manage Google linking. Contact contact@nuvreon.com for access, correction, deletion or privacy questions. Disconnecting RIFTWAKE in your Google account does not itself delete the game account already stored by RIFTWAKE.
Referrals and event progress
When you start a new registration through a referral link or code, the browser stores the code and information needed to link the registration within a seven-day referral window. Expired local information is cleared when referral information is processed again or you clear site storage. Applying a referral records the inviter and newcomer account identifiers, registration and email-verification times, and the referral relationship. Qualifying play after registration establishes referral progress. The inviter sees aggregate signup and play-qualification counts, not friends’ email addresses. We do not collect an address book to send invitations. Verified play dates, match results and final standings for the relevant period are processed to evaluate event participation and reward conditions.
Optional marketing email consent
Updates and events are separate optional marketing email choices in My Account, both off initially. Declining does not restrict gameplay or reward eligibility. Messages use only your current verified account email; a changed address requires fresh consent. We retain your chosen categories and language, consent text version, consent and withdrawal times, an identifier bound to the email address, and dated processing receipts. Withdraw at any time in My Account or through an email’s unsubscribe link. These choices are separate from analytics and in-game advertising settings; necessary account messages such as signup confirmation are handled separately. A consent-status reminder may be provided without promotional content.
Email delivery and suppression
Resend sends authentication emails, consented marketing emails and consent-status reminders. For delivery, it receives the recipient email address, message content and unsubscribe link. We process message identifiers, delivery status, bounces and spam complaints returned by the provider. We also retain unsubscribe, bounce and complaint records to block further unwanted sends. Marketing messages contain no opening-tracking pixels or click-tracking links. Withdrawal excludes unsent messages, but a message already submitted to the provider cannot be recalled. The provider may process information outside your country under its service and privacy terms.
Retention of referral, consent and email records
We have not set a fixed deletion period for referral relationships, consent and withdrawal history, sent content and processing records, or suppression records. Withdrawing consent does not automatically delete these records. We retain them to verify referral and reward processing, document consent and withdrawal, prevent unwanted resending and handle inquiries. Send access, correction or deletion requests to contact@nuvreon.com. After verifying ownership, we review applicable obligations and the need to retain the records.